Ask the Expert

Web browsers & smart cards

With respect to security, how does the Web browser handle the non-repudiation (digital signature) and encryption of a message using a smart card? The smart card contains a user private key. Is it really secure (as compared to a window message client)?


    Requires Free Membership to View

A Web browser handles the non-repudiation and encryption of a message using a smart card just as when using the technology on a desktop computer, except the private key is stored on the card. Software will require a passphrase (or biometrics) to access the private key; hence we have something the user knows -- passphrase and something he has -- the card.

There is no fundamental difference between a smart card and window message client except that a person can carry his smart card from computer to computer, making his identity more portable (not tied to a particular desktop or notebook PC).


This was first published in April 2001

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.